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In the Claims: 

1. (Previously Presented) A computer readable medium, comprising 
instructions for metering execution of code, the instructions comprising: 
receiving, at a protected service, a call from an application asking for 

execution of the protected service within a first runtime area; 
requesting permission for the execution, wherein the request is made by the 
protected service to a metering engine operating in a second runtime 
area, wherein the request is made through a secure transmission 
layer; and 

analyzing the request, at the metering engine, wherein the analyzing 
comprises: 

referencing, within the metering engine, a service contract 

comprising rules governing operation of the protected service; 
referencing, within the metering engine, a secure store of meter data, 

wherein the meter data comprises historical data reflecting 

past operation of the protected service; 
using the rules and the meter data to decide the requested 

permission; and 
updating the metering data to reflect the analysis. 

2. (Previously Presented) The computer readable medium of claim 1, 
wherein the service contract is selected from among multiple service 
contracts. 
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3. (Previously Presented) The computer readable medium of claim 1, 
wherein the first and second runtime areas reside in different partitions of 
memory. 

4. (Previously Presented) The computer readable medium of claim 1, 
wherein the first runtime area is located at a first computing device and the 
second runtime area is located at a second computing device. 

5. (Previously Presented) The computer readable medium of claim 1, 
wherein the meter data comprises a number of times a protected service has 
been called. 

6. (Previously Presented) The computer readable medium of claim 5, 
wherein the meter data contains information relevant to more than one 
protected service. 

7. (Previously Presented) The computer readable medium of claim 1, 
wherein requesting permission comprises opening a secure connection 
between the protected service and a metering engine configured to perform 
the analysis. 

8. (Previously Presented) The computer readable medium of claim 1, 
wherein requesting permission comprises sending an encrypted message 
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from the protected service in the first runtime area to the metering engine 
within the second runtime area. 

9. (Previously Presented) The computer readable medium of claim 1, 
wherein the permission was given, additionally comprising: 

executing the protected service; and 

returning results of the execution to the application. 

10. (Previously Presented) The computer readable medium of claim 1, 
wherein the permission was not given, additionally comprising returning 
notice of failure to execute the protected service to an application that 
initiated the call. 

11. (Currently Amended) A processor-readable medium comprising 
processor-executable instructions for metering execution of code, the 
processor-executable instructions comprising instructions for: 
receiving, at a protected service, a call from an application asking for 

execution of the protected service , wherein the protected service is 
one of a plurality of protected services which may be called by the 
application ; 

requesting authorization to execute the protected service, wherein the 
authorization request is made from the protected service to a 
metering engine through a secure transmission layer; and 
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analyzing, with the metering engine, a service contract in view of meter 
data to determine if the authorization request to use the protected 
service by the application should be allowed, wherein the service 
contract is one of a plurality of service contracts associated with the 
plurality of protected services, and wherein the analyzing comprises: 
referencing, within the metering engine, the service contract, 
wherein the service contract comprises rules governing 
operation of the protected service , the rules comprising a 
number of times the protected service may be executed and a 
period of time during which the protected service may be 
executed ; 

referencing, within the metering engine, a secure store of meter data, 
wherein the meter data comprises historical data reflecting 
past operation of the protected service; 

using the rules and the meter data to decide the requested 
authorization; and 

updating the metering data to reflect the analysis. 

12. (Original) The processor-readable medium as recited in claim 1 1, wherein 
the metering engine operates within a runtime area that is separate from a 
runtime area within which the protected service operates. 

13. (Currently Amended) The processor-readable medium as recited in claim 
1 1 , wherein the analyzing comprises instructions for: 
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analyzing the service contract using the meter data and identity of the 
protected service as input to the analysis. 

14. (Cancelled) 

15. (Original) The processor-readable medium as recited in claim 11, wherein 
the metering of code execution is performed in a managed code 
environment. 

16. (Original) The processor-readable medium as recited in claim 11, 
additionally comprising, where the authorization request was allowed, 
instructions for: 

executing the protected service; and 

returning results of the execution to the application. 

17. (Original) The processor-readable medium as recited in claim 11, 
additionally comprising, where the authorization request was not allowed, 
instructions for returning notice of failure to execute to the application. 

18. (Original) The processor-readable medium as recited in claim 11, 
comprising further instructions for protecting communications between the 
protected service and the metering engine with cryptography. 

19. (Previously Presented) A code-executing device, comprising: 
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first and second runtime areas with a secure communication channel 
between them; 

a protected service configured to receive a request from an application for 

execution of the protected service within the first runtime area; and 
a metering engine, configured to receive the request and to operate within 
the second runtime area and to return an allowance code or a 
rejection code in response to the request by applying rules to meter 
data, wherein the metering engine comprises: 
an enforcement engine, configured for secure communication with 

the protected service; 
a service contract, configured to supply the rules governing 

operation of the protected service, to the enforcement engine; 

and 

a secure store, within which the meter data is contained, wherein the 
secure store is configured to supply, to the enforcement 
engine, historical data reflecting past operation of the 
protected service. 

20. (Canceled) 

21. (Previously Presented) The code-executing device of claim 19, wherein 
the metering engine is configured to: 
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use identity of the protected service and data from the secure store of meter 
data as input to an analysis providing return of the allowance code or 
the rejection code; and 

update the secure store of meter data to reflect the analysis. 

22. (Original) The code-executing device of claim 19, wherein the code- 
executing device is a cellular telephone. 

23. (Original) The code-executing device of claim 19, wherein the code- 
executing device is configured for use within a managed code environment. 

24. (Original) The code-executing device of claim 19, wherein the code- 
executing device is a compound device, and wherein the protected service 
is contained on a first portion of the compound device and the metering 
engine is contained on a second portion of the compound device, and 
wherein the first portion of the compound device is remotely located from 
the second portion of the compound device. 

25. (Original) The code-executing device of claim 1 9, additionally comprising 
a library of protected services, within which the protected service is 
contained. 

26. (Original) The code-executing device of claim 19, additionally comprising 
a library of applications, within which the application is contained. 
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27. (Previously Presented) A computer readable medium comprising 
instructions for operating a managed code environment, the instructions 
comprising: 

an application configured to consume services from a library of protected 
services; 

a protected service, within the library of protected services, configured to 

receive a request from the application for execution; and 
a metering engine, configured to return of an allowance code or a rejection 
code to the request based on rules governing operation of the 
protected service, wherein the metering engine comprises: 
an enforcement engine, configured for secure communication with 

the protected service; 
a service contract, configured to supply the rules governing 

operation of the protected service, to the enforcement engine; 

and 

a secure store, within which the meter data is contained, wherein the 
secure store is configured to supply, to the enforcement 
engine, historical data reflecting past operation of the 
protected service. 

28. (Previously Presented) The computer readable medium of claim 27, 
wherein the protected service and the metering engine operate within 
different runtime areas. 



10 



1 

2 
3 
4 
5 
6 
7 
X 
9 
10 

12 
13 
14 
15 
16 
17 
IX 
19 
20 
21 
22 
23 
24 
25 



S/N 10/791,208 



Response to Office Action Dated 04/08/2008 



29. (Cancelled) 



30. (Previously Presented) The computer readable medium of claim 27, 
wherein the enforcement engine is configured to return of the allowance 
code or the rejection code by: 

analyzing the service contract using identity of the application, identity of 
the protected service, and data from the secure store of meter data as 
input to the analysis; and 

updating the secure store of meter data to reflect the analysis. 



31. (Previously Presented) A code-executing device for metering execution of 
code, the code-executing device comprising: 
means for calling a protected service from an application; 
means for calling a metering engine from the protected service; and 
means for analyzing a contract to determine whether to allow or prohibit 

use of the protected service by the application, wherein the analyzing 

comprises: 

referencing, within the metering engine, a service contract 
comprising rules governing operation of the protected service; 

referencing, within the metering engine, a secure store of meter data, 
wherein the meter data comprises historical data reflecting 
past operation of the protected service; 
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using the rules and the meter data to decide the requested 

permission; and 
updating the metering data to reflect the analysis. 

32. (Original) The code-executing device as recited in claim 31, additionally 
comprising, where allowance was determined to be appropriate: 

means, defined in the protective service, for executing functionality 

requested by the application; and 
means for returning results of the execution to the application. 

33. (Original) The code-executing device as recited in claim 31, additionally 
comprising, where rejection was determined to be appropriate, means for 
returning notice of the rejection to the application. 

34. (Previously Presented) The code-executing device as recited in claim 31, 
wherein the means for analyzing the contract comprises: 

means for analyzing the contract using identity of the application, identity 
of the protected service, rules within the contract, and data from a 
secure store of meter data as input to the analysis. 

35. (Original) The code-executing device as recited in claim 31, wherein the 
means for calling the metering engine comprises: 

means for opening a secure connection between the protected service and 
the metering engine; and 
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means for operating the protected service and the metering engine within 
distinct runtime areas. 

36. (Original) The code-executing device as recited in claim 31, wherein the 
metering is performed in a managed code environment. 
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